2210 matches found
Solaris 10 (x86) : 149164-01 (deprecated)
Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel/IO. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...
Windows Service for User (S4U) Scheduled Task Persistence - Event Trigger
Creates a scheduled task that will run using service-for-user S4U. This allows the scheduled task to run even as an unprivileged user that is not logged into the device. This will result in lower security context, allowing access to local resources only. The module requires 'Logon as a batch job'...
Windows Service for User (S4U) Scheduled Task Persistence - Logon Trigger
Creates a scheduled task that will run using service-for-user S4U. This allows the scheduled task to run even as an unprivileged user that is not logged into the device. This will result in lower security context, allowing access to local resources only. The module requires 'Logon as a batch job'...
Windows Service for User (S4U) Scheduled Task Persistence - Logon Trigger
Creates a scheduled task that will run using service-for-user S4U. This allows the scheduled task to run even as an unprivileged user that is not logged into the device. This will result in lower security context, allowing access to local resources only. The module requires 'Logon as a batch job'...
Windows Service for User (S4U) Scheduled Task Persistence - Schedule Trigger
Creates a scheduled task that will run using service-for-user S4U. This allows the scheduled task to run even as an unprivileged user that is not logged into the device. This will result in lower security context, allowing access to local resources only. The module requires 'Logon as a batch job'...
Windows Autologin Password Dumper & Manager
Windows Autologin Password is the free command-line tool to quickly dump and manage the Windows Automatic Logon Password. Automatic Logon is one of the useful feature in Windows which allows you to login to system automatically without entering the password everytime. This tool helps you to easil...
The user has not been granted the requested logon type on this computer
Challenge Although the nWorks service account has local administrator rights and is a member of the nWorks Enterprise Manager Accounts local group, nWorks Collector and Enterprise Manager cannot be installed, because the installer does not accept the specified service account. The following error...
Flaw in Oracle Logon Protocol Leads to Easy Password Cracking
There is a serious vulnerability in the authentication protocol used by some Oracle databases, a flaw that could enable a remote attacker to brute-force a token provided by the server prior to authentication and determine a user’s password. The attacker could then log on as an authenticated user...
MS12-042: Vulnerabilities in Windows Kernel could allow elevation of privilege: June 12, 2012
Resolves vulnerabilities in Microsoft Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that exploits the vulnerability. An attacker must have valid logon credentials and be able to log on locally to exploit this...
Fedora Update for samba4 FEDORA-2012-6382
Check for the Version of samba4 OpenVAS Vulnerability Test Fedora Update for samba4 FEDORA-2012-6382 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
PT-2012-1682 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.4 Description: A CRLF injection issue exists in the /+CSCOE+/logon.html endpoint, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP...
ashleymadison.com Access Detection (Logon) (deprecated)
Binary data 6405.prm...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 forum/register.php or 2 forum/logon.php...
LightNEasy 3.4.2 Multiple Vulnerabilities
Exploit for php platform in category web applications ========================================================================= LightNEasy 3.4.2 Multiple Vulnerabilities =========================================================================...
THC-HYDRA v7.0 new version released for Download
THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...
THC-HYDRA v7.0 new version released for Download
THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...
Trojan Makes Child-Porn Accusation, Locks Computer, Requests $17
A new ransomware scam locks down its victims’ computers, attempting to convince them that child pornography has been found therein, and informs users that their machine will be unlocked only after paying a $17 500 ruble fine, according to a BitDefender analysis reported by MalwareCity. The trojan...
PT-2011-3000
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Description A cross-site scripting XSS issue exists in the logon page of Remote Desktop Web Access RD Web Access, allowing remote attackers to inject arbitrary web script or HTML via the URI...
CVE-2011-1263: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...
